TL;DR for CISOs: Ahold Delhaize took systems offline after a cybersecurity incident that reportedly reaches U.S. and European banner
TL;DR for CISOs: CISA added three Linux kernel flaws to its Known Exploited Vulnerabilities catalog on September 18 with a Septemb
The OWASP Top 10 is a ranked list of the ten application security risk categories that OWASP's Top Ten project team judges most critical, based primarily on contributed testing data and, for two of the ten slots, a community practitioner survey. The
Most businesses today are drowning in customer data. And yet paradoxically, they're also flying blind. The records sitting in your CRM are probably incomplete, stale, or just wrong in ways you haven't fully accounted for. That invisible gap between w
The convergence between anti-money laundering and cybersecurity control is rapidly taking the shape of the future of financial crime prevention. With digital banking, instant payments, and remote onboarding becoming the norm, criminals are both takin
Actionable Insights For CISOs:
Expand tabletop exercises to include data extortion / leak scenarios.
Review and harden OAuth, API, and third-party app integrations.
Conduct phishing and vishing simulations, especially for high-privilege users.
One of my friends, Greg van der Gaast tells this great story that perfectly illustrates one of the biggest challenges we face in cybersecurity today. It goes something like this…
“Imagine someone who loves coffee. They have a fantastic coffee shop j
Imagine seeing photos and videos of a massive political rally flooding your social media feed. It looks real—except it never happened. That’s the power of disinformation propaganda: creating false realities that influence thoughts, decisions, and eve
“It is not the strongest of the species that survives, not the most intelligent that survives.
It is the one that is the most adaptable to change.”
Charles Robert Darwin, 1809 – 1882
Change is constant, we may like it or not. But it is th
I had a tremendous time at the InCyber Montreal forum. The speakers, panels, fellow practitioners, and events were outstanding!
I bumped into Dan Lohrmann and Nancy Rainosek before their panel with Sue McCauley on CISO challenges. We had some very int
A SOC is responsible for detecting, investigating, and responding to cyber threats. As the attack surface continues to expand, SOC teams are extremely overburdened. Further, there are talent shortages. The Google SOC team has found a way to scale and
Topic Brief
We already talked about developing a modern security operations center or a SOC and some of you were left with questions how do you actually journey ? how do you travel to this modern SOC ? It's easy to discuss what the modern SOC should
Cross-posted from Anton on Security.
This is about the Security Operations Center (SOC). And automation. And of course SOC automation.
Let’s start from a dead-obvious point: you cannot and should not automate away all people from your SOC today. Or, as
[Posted on behalf of Anton Chuvakin Security Strategy - chronicle Google] (Source)
A lot of people seem to think that matching technical threat intelligence (TI) to logs for threat detection is a great idea. Some people also think this is very easy.
Top Talks @ DEF CON 26, 2018: Your Complete Guide
Our editorial team has handpicked the best of the best talks at DEF CON 26 -is one of the world's largest hacker conventions, held annually in Las Vegas, Nevada. Following is the list of top Emerging A
